Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,948

CVE-2020-28470

Cross-site Scripting (XSS)

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Scully
Products
Scully
CVE-2020-28468

Improper Control of Generation of Code ('Code Injection')

This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.

CVSS 3.1 · 8.1 High EPSS 4.4% KEV · Not listed
Vendors
Pwntools Project
Products
Pwntools
CVE-2020-28464

Remote Code Execution (RCE)

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Djv Project
Products
Djv
CVE-2020-28463

Server-side Request Forgery (SSRF)

All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Steps to reproduce by Karan Bamal: 1. Download and install the latest package of reportlab 2. Go to demos -> odyssey -> dodyssey 3. In the text file odyssey.txt that needs to be converted to pdf inject <img src="http://127.0.0.1:5000" valign="top"/> 4. Create a nc listener nc -lp 5000 5. Run python3 dodyssey.py 6. You will get a hit on your nc showing we have successfully proceded to send a server side request 7. dodyssey.py will show error since there is no img file on the url, but we are able to do SSRF

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Reportlab
Products
Fedora Reportlab
CVE-2020-28462

Prototype Pollution

This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Ion-parser Project
Products
Ion-parser
CVE-2020-28461

Prototype Pollution

This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.

CVSS 3.1 · 7.3 High EPSS 1.2% KEV · Not listed
Vendors
Js-ini Project
Products
Js-ini
CVE-2020-28460

Prototype Pollution

This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.

CVSS 3.1 · 5.6 Medium EPSS 1.5% KEV · Not listed
Vendors
Multi-ini Project
Products
Multi-ini
CVE-2020-28457

Cross-site Scripting (XSS)

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
S-cart
Products
S-cart
CVE-2020-28456

Cross-site Scripting (XSS)

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

CVSS 3.1 · 7.3 High EPSS 1.1% KEV · Not listed
Vendors
S-cart
Products
S-cart
CVE-2020-28455

Cross-site Scripting (XSS)

This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Markdown-it-toc Project
Products
Markdown-it-toc
CVE-2020-28452

Cross-site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core_2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core_2.11; the package com.softwaremill.akka-http-session:core_2.13 from 0 and before 0.6.1. CSRF protection can be bypassed by forging a request that contains the same value for both the X-XSRF-TOKEN header and the XSRF-TOKEN cookie value, as the check in randomTokenCsrfProtection only checks that the two values are equal and non-empty.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Softwaremill
Products
Akka-http-session
CVE-2020-28450

Prototype Pollution

This affects all versions of package decal. The vulnerability is in the extend function.

CVSS 3.1 · 8.6 High EPSS 1.8% KEV · Not listed
Vendors
Decal Project
Products
Decal
CVE-2020-28449

Prototype Pollution

This affects all versions of package decal. The vulnerability is in the set function.

CVSS 3.1 · 8.6 High EPSS 1.8% KEV · Not listed
Vendors
Decal Project
Products
Decal
CVE-2020-28448

Prototype Pollution

This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.

CVSS 3.1 · 5.6 Medium EPSS 1.5% KEV · Not listed
Vendors
Multi-ini Project
Products
Multi-ini
CVE-2020-28447

Command Injection

This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Xopen Project
Products
Xopen